About the Role
Title: Staff Infrastructure Security Engineer
Location: Remote (Based in Canada)
JobDescription:
The Infrastructure Security Engineer will work to ensure the privacy and integrity of our users’ sensitive information. Their objective will be to build core security tooling for platforms that perform the collection, computation, aggregation, and storage of personal financial data and partner with technical teams across the company, advising them on secure design patterns for cloud and corporate infrastructure. They will lead strategic initiatives to remediate and mitigate infrastructure security risk across the organization.
Projects you may be working on in this position include:
- Design the security controls, automations, and infrastructure to support self-service AWS account creation and administration
- Build tools to perform continuous monitoring, reporting, and remediation of cloud security issues
- Design pragmatic baseline security controls to support new business units and rapid prototyping
- Perform security design reviews for critical partnerships and new technologies
Where you can make an impact:
- Develop and deploy security controls and measures to protect cloud-based infrastructure and services. This includes defining what good security looks like for cloud infrastructure and executing on initiatives that get us here. Ensure that security measures align with industry best practices and regulatory requirements.
- Serve as a subject matter expert on cloud security matters, providing guidance and support to other engineering teams leveraging various tech stacks. This involves assisting with the design and implementation of secure network/infrastructure architectures and advising on security best practices.
- Develop and implement automation scripts and workflows to streamline security operations and ensure consistent enforcement of security controls across cloud environments. Leverage Infrastructure as Code (IaC) tools such as Terraform to define and deploy security configurations programmatically.
- Assess the security posture of public cloud environments. This involves reviewing configurations, access controls, identity management, encryption mechanisms, and compliance frameworks to identify potential security gaps and risks.
- Monitor cloud environments for security events and anomalies, such as unauthorized access attempts, data breaches, and configuration changes. Utilize cloud-native security tools and SIEM (Security Information and Event Management) platforms to collect and analyze security logs and alerts. Respond promptly to security incidents, investigating root causes and implementing remediation actions.
You are:
- A subject matter expert in AWS security controls and industry best practices for building secure cloud environments
- Pragmatic in your approach to reducing risk in a manner that incorporates business and product needs
- Focused on building scalable cloud security solutions that allow for a high degree of engineering autonomy while reducing risk to acceptable levels
- Excited to lead roadmap items outside your core competencies to move the program forward and adapt to prioritize critical tasks as they arise
- An ambassador for fostering a respectful, blameless, and collaborative work environment
Your experience:
We recognize not everyone will meet all of the criteria. If you meet most of the criteria below and you’re excited about the opportunity and willing to learn, we’d love to hear from you.
- 5+ years of experience in a professional cloud security engineering role with a focus on AWS.
- 2+ years experience writing infrastructure as Code (IaC) for production or environments using Terraform or other IaC tools.
- Experience building in Python and comfortable with learning other programming languages as needed.
- Experience building security integrations into CI/CD pipelines.
- Experience in security monitoring, triage and incident response in cloud and corporate environments.
- Experience building highly-scalable cloud security solutions with a high degree of autonomy while taking informed risks to move the business forward.
- Demonstrated ability to work collaboratively and constructively with cross-functional stakeholders to support the needs of the business while evaluating and addressing risk.
- Can mentor/coach junior engineers and provide them guidance when needed.
- Demonstrated ability to identify and drive process improvements needs.
- Experience driving large-scale security engineering projects across multiple cloud environments.